@farm.js/core 0.1.41 → 0.1.42

package/dist/{chunk-ENOBPDKZ.mjs → chunk-NU25TRIO.mjs}

@@ -22,9 +22,10 @@ import {
 import {
   resolveFarmAgentCrawlers,
   resolveFarmAgentSitemap,
+  resolveFarmAppManifestConfig,
   resolveFarmNoindexPreviews,
   resolveFarmPerformanceConfig
-} from "./chunk-BYQVROIP.mjs";
+} from "./chunk-DMRPN25V.mjs";
 import {
   resolveFarmLlmsTxtConfig
 } from "./chunk-ETPEZLS3.mjs";
@@ -154,7 +155,7 @@ function resolveFarmAgentConfig(input, context = {}) {
     crawlers: resolveFarmAgentCrawlers(input?.crawlers),
     apiCatalog: resolveFarmAgentBoolean(input?.apiCatalog, "apiCatalog", false),
     aiCatalog: resolveFarmAgentBoolean(input?.aiCatalog, "aiCatalog", true),
-    manifest: resolveFarmAgentBoolean(input?.manifest, "manifest", true),
+    manifest: resolveFarmAppManifestConfig(input?.manifest),
     // Same rule as llms.txt: the docs engine serves its own MCP server at /mcp.
     mcp: resolveFarmAgentBoolean(input?.mcp, "mcp", !context.docs)
   };

package/dist/{chunk-SVPGWJZF.mjs → chunk-PIZXONIS.mjs}

@@ -4,6 +4,9 @@ import {
 import {
   DEFAULT_ERROR_STYLES
 } from "./chunk-XAXTTBUT.mjs";
+import {
+  resolveFarmAppManifestConfig
+} from "./chunk-DMRPN25V.mjs";
 import {
   serializeFarmLlmsTxt
 } from "./chunk-ETPEZLS3.mjs";
@@ -42,7 +45,7 @@ import {
 } from "./chunk-ZZGQD7A4.mjs";
 import {
   FARM_VERSION
-} from "./chunk-VLPII2JJ.mjs";
+} from "./chunk-U2UC7UGP.mjs";
 import {
   localizeFarmPathname
 } from "./chunk-L3KT7IXV.mjs";
@@ -961,13 +964,11 @@ function isFarmAppManifestPath(pathname) {
   return pathname === FARM_APP_MANIFEST_PATH || pathname === FARM_APP_MANIFEST_LEGACY_PATH;
 }
 __name(isFarmAppManifestPath, "isFarmAppManifestPath");
-var FARM_INFRA_SIGNATURE_HEADER = "farmjs-infra-signature";
-var SIGNED_PURPOSE = "farmjs-manifest-v1";
-var SIGNATURE_WINDOW_SECONDS = 300;
 function resolveFarmAppManifestInput(config, extra) {
   const llms = config.agent?.llmsTxt;
   const plugins = (config.plugins ?? []).map(({ name }) => name);
   const webmcp = plugins.includes("farm:webmcp");
+  const sections = resolveFarmAppManifestConfig(config.agent?.manifest);
   return {
     renderer: config.renderer?.name ?? "react",
     basePath: config.basePath || "/",
@@ -984,7 +985,7 @@ function resolveFarmAppManifestInput(config, extra) {
       openapi: config.openapi?.enabled && config.openapi.specRoute ? config.openapi.specRoute : null
     },
     plugins,
-    analytics: config.analytics !== false
+    ...sections ? { sections } : {}
   };
 }
 __name(resolveFarmAppManifestInput, "resolveFarmAppManifestInput");
@@ -993,56 +994,71 @@ var SOURCES = {
   standalone: "defineTool",
   serverFunction: "serverFunction"
 };
-function createFarmAppManifest(input, { full = false } = {}) {
-  const manifest = {
+var DEFAULT_SECTIONS = resolveFarmAppManifestConfig(void 0);
+function createFarmAppManifest(input) {
+  const sections = input.sections ?? DEFAULT_SECTIONS;
+  const { app, mcp, webmcp } = sections;
+  return {
     schemaVersion: 1,
-    app: {
-      farm: FARM_VERSION,
-      renderer: input.renderer,
+    app: app ? {
+      ...app.version ? { farm: FARM_VERSION } : {},
+      ...app.renderer ? { renderer: input.renderer } : {},
       basePath: input.basePath,
-      build: input.build
-    },
-    packages: input.packages,
-    mcp: {
-      servers: _listFarmMCPCatalogs().map(({ server, tools, details }) => {
-        const open = details?.public === true && !input.guardCoversPath?.(server.path);
-        const listed = full || open;
-        return {
-          name: server.name,
-          version: server.version,
-          path: server.path,
-          authorization: open ? "none" : "required",
-          resources: listed ? [...details?.resources ?? []] : [],
-          prompts: listed ? [...details?.prompts ?? []] : [],
-          tools: (listed ? tools : []).map((tool) => {
-            const schemas = details?.schemas?.[tool.name];
-            const hints = Object.fromEntries(
-              ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
-            );
-            return {
-              name: tool.name,
-              ...tool.title ? { title: tool.title } : {},
-              ...tool.description ? { description: tool.description } : {},
-              source: SOURCES[tool.kind],
-              // MCP clients never see the route behind a tool; only Infra's view names it.
-              ...full && tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
-              ...hints,
-              ...schemas ? { inputSchema: schemas.input } : {},
-              ...schemas?.output ? { outputSchema: schemas.output } : {}
-            };
-          })
-        };
-      })
-    },
-    webmcp: input.webmcp,
-    integrations: input.integrations,
-    agent: input.agent,
-    plugins: input.plugins
+      ...app.build ? { build: input.build } : {}
+    } : null,
+    packages: sections.packages === "names" ? Object.fromEntries(Object.keys(input.packages).map((name) => [name, null])) : sections.packages ? input.packages : null,
+    mcp: mcp ? { servers: listServers(input, mcp) } : null,
+    webmcp: webmcp ? {
+      enabled: input.webmcp.enabled,
+      tools: input.webmcp.tools.filter((tool) => !webmcp.hide.includes(tool.name))
+    } : null,
+    integrations: sections.integrations ? input.integrations : null,
+    agent: sections.agent ? input.agent : null,
+    plugins: sections.plugins ? input.plugins : null
   };
-  manifest.mcp.servers.push(...listDefaultServer(input));
-  return manifest;
 }
 __name(createFarmAppManifest, "createFarmAppManifest");
+function listServers(input, mcp) {
+  const servers = _listFarmMCPCatalogs().map(({ server, tools, details }) => {
+    const open = details?.public === true && !input.guardCoversPath?.(server.path);
+    return {
+      name: server.name,
+      version: server.version,
+      path: server.path,
+      authorization: open ? "none" : "required",
+      resources: open ? [...details?.resources ?? []] : [],
+      prompts: open ? [...details?.prompts ?? []] : [],
+      tools: (open ? tools : []).map((tool) => {
+        const schemas = details?.schemas?.[tool.name];
+        const hints = Object.fromEntries(
+          ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
+        );
+        return {
+          name: tool.name,
+          ...tool.title ? { title: tool.title } : {},
+          ...tool.description ? { description: tool.description } : {},
+          source: SOURCES[tool.kind],
+          ...hints,
+          ...schemas ? { inputSchema: schemas.input } : {},
+          ...schemas?.output ? { outputSchema: schemas.output } : {}
+        };
+      })
+    };
+  });
+  return [...servers, ...listDefaultServer(input)].filter((server) => !mcp.hide.includes(server.name)).map((server) => ({
+    ...server,
+    tools: server.tools.filter((tool) => !mcp.hide.includes(`${server.name}/${tool.name}`)).map((tool) => mcp.schemas ? tool : withoutSchemas(tool))
+  }));
+}
+__name(listServers, "listServers");
+function withoutSchemas({
+  inputSchema: _input,
+  outputSchema: _output,
+  ...tool
+}) {
+  return tool;
+}
+__name(withoutSchemas, "withoutSchemas");
 function listDefaultServer(input) {
   const server = input.defaultMCP?.();
   if (!server) return [];
@@ -1068,57 +1084,13 @@ function listDefaultServer(input) {
   ];
 }
 __name(listDefaultServer, "listDefaultServer");
-var encoder = new TextEncoder();
-var hex = /* @__PURE__ */ __name((bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
-async function sha256Hex(value) {
-  return hex(await crypto.subtle.digest("SHA-256", encoder.encode(value)));
-}
-__name(sha256Hex, "sha256Hex");
-async function hmacHex(secret, message) {
-  const key = await crypto.subtle.importKey(
-    "raw",
-    encoder.encode(secret),
-    { name: "HMAC", hash: "SHA-256" },
-    false,
-    ["sign"]
-  );
-  return hex(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
-}
-__name(hmacHex, "hmacHex");
-function sameHex(a, b) {
-  if (a.length !== b.length) return false;
-  let difference = 0;
-  for (let index = 0; index < a.length; index++)
-    difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
-  return difference === 0;
-}
-__name(sameHex, "sameHex");
-async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
-  if (!header || header.length > 2048) return false;
-  const parts = header.split(",").map((part) => part.trim());
-  const timestamp = Number(
-    /^t=(\d{1,12})$/.exec(parts.find((part) => part.startsWith("t=")) ?? "")?.[1]
-  );
-  if (!Number.isSafeInteger(timestamp)) return false;
-  if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
-  const signatures = parts.filter((part) => part.startsWith("v1=")).map((part) => part.slice(3)).filter((value) => /^[0-9a-f]{64}$/.test(value));
-  if (!signatures.length || signatures.length > 8) return false;
-  const expected = await hmacHex(await sha256Hex(key), `${SIGNED_PURPOSE}
-${timestamp}`);
-  return signatures.some((signature) => sameHex(signature, expected));
-}
-__name(verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
-function processEnv() {
-  return globalThis.process?.env ?? {};
-}
-__name(processEnv, "processEnv");
 var CORS_HEADERS = {
   "access-control-allow-origin": "*",
   "access-control-allow-methods": "GET, HEAD, OPTIONS",
-  "access-control-allow-headers": `If-None-Match, ${FARM_INFRA_SIGNATURE_HEADER}`,
+  "access-control-allow-headers": "If-None-Match",
   "access-control-expose-headers": "ETag"
 };
-async function createFarmAppManifestResponse(request, input, options = {}) {
+async function createFarmAppManifestResponse(request, input) {
   const method = request.method.toUpperCase();
   if (method === "OPTIONS") return new Response(null, { status: 204, headers: CORS_HEADERS });
   if (method !== "GET" && method !== "HEAD") {
@@ -1127,23 +1099,16 @@ async function createFarmAppManifestResponse(request, input, options = {}) {
       headers: { ...CORS_HEADERS, allow: "GET, HEAD, OPTIONS", "content-type": "text/plain" }
     });
   }
-  const signature = request.headers.get(FARM_INFRA_SIGNATURE_HEADER);
-  const key = input.analytics ? (options.env ?? processEnv()).FARMJS_API_KEY?.trim() : void 0;
-  const full = Boolean(
-    signature && key && await verifyFarmInfraManifestSignature(signature, key)
-  );
-  const body = JSON.stringify(createFarmAppManifest(input, { full }));
+  const body = JSON.stringify(createFarmAppManifest(input));
   const etag = createFarmWeakETag(body);
   const headers = {
     ...CORS_HEADERS,
     "content-type": "application/json; charset=utf-8",
-    // The full view is for Infra alone; shared caches keep the two views apart.
-    "cache-control": full ? "private, no-store" : "public, max-age=0, must-revalidate",
-    vary: FARM_INFRA_SIGNATURE_HEADER,
+    "cache-control": "public, max-age=0, must-revalidate",
     etag,
     "x-content-type-options": "nosniff"
   };
-  if (!full && matchesFarmIfNoneMatch(request.headers.get("if-none-match"), etag)) {
+  if (matchesFarmIfNoneMatch(request.headers.get("if-none-match"), etag)) {
     return new Response(null, { status: 304, headers });
   }
   return new Response(method === "HEAD" ? null : body, { status: 200, headers });
@@ -1186,7 +1151,6 @@ export {
   FARM_APP_MANIFEST_PATH,
   FARM_APP_MANIFEST_LEGACY_PATH,
   isFarmAppManifestPath,
-  FARM_INFRA_SIGNATURE_HEADER,
   resolveFarmAppManifestInput,
   createFarmAppManifestResponse
 };

package/dist/{chunk-JOTUZIM4.cjs → chunk-QKZMB7LY.cjs}

@@ -11,7 +11,7 @@ var _chunkMY5PZYADcjs = require('./chunk-MY5PZYAD.cjs');
 var _chunkIK6LVLKCcjs = require('./chunk-IK6LVLKC.cjs');
 
 
-var _chunkEX4MKHXNcjs = require('./chunk-EX4MKHXN.cjs');
+var _chunkBXJ5HJTJcjs = require('./chunk-BXJ5HJTJ.cjs');
 
 
 
@@ -564,7 +564,7 @@ async function resolveAPIContext(options) {
     config: options.config,
     configPath: options.configPath
   }));
-  const docs = isResolvedDocsConfig(docsInput) ? docsInput : await _chunkEX4MKHXNcjs.resolveDocsConfig.call(void 0, docsInput, { root, srcDir });
+  const docs = isResolvedDocsConfig(docsInput) ? docsInput : await _chunkBXJ5HJTJcjs.resolveDocsConfig.call(void 0, docsInput, { root, srcDir });
   const guardedPaths = new Set(_nullishCoalesce(_optionalChain([runtimeConfig, 'optionalAccess', _20 => _20.guardedPaths]), () => ( [])));
   return {
     root,

package/dist/{chunk-FJGIVDA5.mjs → chunk-QTEJGB5A.mjs}

@@ -24,7 +24,7 @@ import {
   renderFarmLocaleAlternateLinks,
   resolveDefaultErrorStatus,
   routeBoundaryCoversDirectory
-} from "./chunk-SVPGWJZF.mjs";
+} from "./chunk-PIZXONIS.mjs";
 import {
   FARM_DEFAULT_MCP_PATH,
   collectFarmDefaultMCPPages,
@@ -81,7 +81,7 @@ import {
   resolveFarmAgentCrawlers,
   resolveFarmAgentSitemap,
   resolveFarmPerformanceConfig
-} from "./chunk-BYQVROIP.mjs";
+} from "./chunk-DMRPN25V.mjs";
 import {
   collectFarmLlmsTxtPages,
   createFarmDefaultLlmsTxt,
@@ -237,7 +237,7 @@ import {
 } from "./chunk-P7XDC7UJ.mjs";
 import {
   FARM_VERSION
-} from "./chunk-VLPII2JJ.mjs";
+} from "./chunk-U2UC7UGP.mjs";
 import {
   resolveFarmTrailingSlashRedirect,
   setFarmTrailingSlashPreference